Instuneai Privacy Policy

Effective Date: March 27, 2026
Website Name: Instuneai
Website URL: https://www.instuneai.com
Contact Email: zjhkrun@gmail.com

Instuneai (hereinafter "we") deeply understands the importance of personal information security and privacy protection. We strictly comply with applicable data protection laws, including the Personal Information Protection Law of the People's Republic of China and the Cybersecurity Law of the People's Republic of China, and reference relevant international standards such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy is formulated to clarify how we collect, use, store, and protect users' personal information, as well as the rights you enjoy.

This Privacy Policy is the core agreement between you and us regarding the processing of personal information. Please read and fully understand the entire content of this policy. By using the Instuneai website and related services, you agree that we process your personal information in accordance with this policy.

I. Scope of Application

1.1 Applicable Subjects

This Privacy Policy applies to all services provided by us through the Instuneai website (https://www.instuneai.com), including AI music generation, image content analysis, and other services, covering all related activities such as user registration, login, service usage, and credit purchases.

1.2 Exclusions

This policy does not apply to the following circumstances:

• Third-party services or links provided through our website (such as Google OAuth login, Stripe payment, Google AdSense advertising, etc.). Such services independently collect and process information and are subject to their own privacy policies, for which we assume no responsibility;
• Personal information that users voluntarily disclose to third parties during the use of our services;
• Information that we do not collect, store, or use;
• Information that has been anonymized and cannot identify specific individuals.

II. Types of Information We Collect

We adhere to the principles of "legality, legitimacy, necessity, and minimization," collecting only user information necessary to provide our services. The specific types are as follows:

2.1 Information You Actively Provide

• Registration and Login Information: When logging in via Google OAuth, we obtain information associated with your Google account (email address, username, profile picture, etc.) for account registration, identity verification, and login validation;
• Service Usage Information: Images actively uploaded and text descriptions entered when using the AI music generation feature, used for AI analysis and music generation; payment-related information submitted when purchasing credits (submitted directly to the Stripe platform; we do not store complete payment information);
• Contact and Feedback Information: Name, contact details, and problem descriptions provided when consulting or providing feedback via email, used to respond to requests and resolve issues.

2.2 Information We Automatically Collect

When you use our services, we automatically collect the following non-sensitive personal information through technical means to optimize your experience and ensure security:

• Device Information: Device model, operating system version, browser type, IP address, device identifiers, etc., used to identify abnormal access and ensure service stability;
• Usage Behavior Information: Login times, functions used, operation records, credit purchase and consumption records, music generation records, etc., used to analyze needs and optimize algorithms and processes;
• Log Information: Access logs, error logs, and other logs generated during website operation, used for troubleshooting and security assurance. Logs do not contain content that can identify individuals.

2.3 Information We Do Not Collect

We do not collect personal sensitive information unrelated to our services, such as ID numbers, bank card numbers, communication records, location trajectories, or contact lists, nor do we require users to provide unnecessary personal information.

III. How We Use Information

We use collected information only for service functionality, security assurance, and quality optimization, strictly following this policy and legal regulations, and not for any purpose without your consent. Specifically:

• Core Service Provision: Using uploaded images and text descriptions for AI analysis to generate music that meets your needs; using login information for identity verification to ensure account security and normal service use;
• Service Optimization and Improvement: Analyzing user habits based on device and usage behavior information to optimize AI generation algorithms, website interface, and service processes; troubleshooting and fixing vulnerabilities to ensure service stability;
• Credit Management and Payment: Recording credit purchases and consumption for credit inquiry and redemption; transmitting necessary order information to Stripe during credit purchases to complete payments, without other uses;
• Responding to User Requests: Using your provided contact details and feedback content to respond to inquiries, complaints, and suggestions;
• Compliance and Security: Cooperating with regulatory inspections and investigations in accordance with legal requirements; identifying and preventing malicious access, fraud, and other illegal activities;
• Other Purposes with Your Consent: If we need to use information for purposes not stated in this policy, we will notify you in a prominent manner in advance and use it only after obtaining your explicit consent.

IV. Information Storage and Security

4.1 Storage Period

We strictly control the storage period of information to match the service purpose:

• Original images and text descriptions uploaded by users: Not stored long-term after AI music generation; automatically deleted within 72 hours at the latest;
• Generated music files: For users' personal use only; typically automatically deleted within 24 hours of generation, and users may save them locally before then;
• Registration and login information (Google-associated information) and credit purchase/consumption records: Retained during the existence of the user account. After account cancellation, all related information will be deleted within 15 business days (unless otherwise required by laws and regulations);
• Device information, usage behavior information, and log information: Stored for no more than 6 months, after which they will be automatically anonymized or deleted. Anonymized data may be retained long-term for service optimization.

4.2 Storage Methods

We store user information on servers that comply with industry security standards, using encryption, access control, and other technical measures to ensure storage security, including:

• Encrypting uploaded images, text descriptions, and generated music files to prevent unauthorized access or tampering;
• Implementing tiered encryption and permission management for login information, credit records, etc., accessible only by authorized personnel;
• Deploying servers in secure facilities with firewalls and intrusion detection systems to prevent network attacks and data breaches;
• Strictly complying with data storage laws and regulations; user information is not stored on overseas servers (unless otherwise required by laws and regulations).

4.3 Security Measures

We have established comprehensive information security management systems and protect user information through technical and organizational measures:

• Technical Measures: Adopting advanced encryption technology, regular data backups, regular security audits, and vulnerability remediation;
• Organizational Measures: Establishing strict information security policies, conducting security training for personnel, clarifying access permissions, and signing confidentiality agreements;
• Emergency Response: Establishing information breach emergency plans; in the event of an incident, we will immediately take remedial measures and notify users and regulatory authorities in accordance with the law.

4.4 Information Deletion and Destruction

When information reaches its storage period, or upon your request for deletion or account cancellation, we will take thorough deletion and destruction measures to ensure information cannot be recovered.

V. Use of Cookies and Similar Technologies

5.1 Purposes of Cookies

To optimize user experience and ensure normal service operation, we use cookie technology in your browser for the following purposes:

• Remembering login status to avoid repeated logins;
• Recording your preference settings (such as interface layout, usage habits) to enhance service experience;
• Analyzing website traffic and user behavior for performance optimization and service improvement;
• Identifying abnormal access to prevent malicious logins and fraudulent behavior;
• Advertising-related: If we display third-party advertisements (such as through Google AdSense), cookies may be used for ad delivery, frequency control, and performance analysis. Third-party advertising alliances may also use cookies to provide personalized ads based on your browsing history. You may choose to stop receiving personalized ads through the opt-out mechanisms of relevant advertising alliances.

5.2 Cookie Management

You may enable, disable, or delete cookies through browser settings. Disabling cookies may affect certain functions (such as inability to maintain login status). For management of third-party advertising cookies, you may visit the Google Ads Settings page to make selections.

We do not collect your sensitive personal information through cookies, nor do we use cookies for purposes beyond those stated in this policy.

VI. Third-Party Services

Our services may integrate third-party partners. Third parties will collect and process information according to their independent privacy policies, and we assume no responsibility for their privacy practices. Key third parties include:

6.1 Google OAuth Login

The login service is provided by Google. When you choose Google login, you will be redirected to the Google authorization page. We receive only basic information such as email, username, and profile picture for registration and login validation, and do not access other privacy information in your Google account. Google's collection and use of information are subject to its privacy policy.

6.2 Stripe Payment

Credit purchase payments are processed by Stripe. When initiating payment, you will be redirected to the Stripe page. We do not collect or store complete payment information; we receive only payment results (success/failure, order ID) for credit allocation. Stripe is a PCI DSS Level 1 certified payment service provider, and its information processing is subject to Stripe's privacy policy.

6.3 Google AdSense Advertising

We may display advertisements provided by Google AdSense. AdSense uses cookies and advertising identifiers to provide personalized ads based on your behavior and interests when visiting the website. You may choose to turn off personalized ads through Google Ads Settings. Google's advertising data processing is subject to Google's privacy policy and Google Partner Policy.

6.4 Other Third-Party Services

If we integrate other third-party services in the future, we will notify you in a prominent manner before integration and proceed only after obtaining your consent.

VII. Your Rights

Under relevant laws, you have the right to know, the right of access, the right to correct, the right to delete, the right to cancel your account, the right to withdraw consent, and other rights. We provide you with ways to exercise these rights:

• Right to Know: Learn about our collection, use, and storage of your information through this policy or by contacting zjhkrun@gmail.com;
• Right of Access: Access your personal information through the account center or by contacting customer service;
• Right to Correct: Request correction of inaccurate information; we will verify and process within 15 business days;
• Right to Delete: Request deletion of your personal information under circumstances specified by law; we will complete the deletion within 15 business days;
• Right to Cancel Account: You may apply to cancel your Instuneai account at any time; we will delete all related information within 15 business days;
• Right to Withdraw Consent: You may withdraw your consent to processing under this policy at any time; after withdrawal, we will stop related collection and use, but this may affect certain service functions, and does not affect processing based on consent before withdrawal;
• Right to Complain: If you believe we have improperly processed information, you may file a complaint with us or regulatory authorities; we will respond within 15 business days.

To exercise the above rights, please contact us at zjhkrun@gmail.com. We may first verify your identity to ensure security.

VIII. International Users and Cross-Border Data Transfer

Our services are available to users worldwide. As we use servers located within China, your information may be transmitted to and stored in China. If you are located outside China, please note that your information will be cross-border transferred to China. We will take necessary measures (such as signing standard contractual clauses) to ensure that information transfer complies with applicable legal requirements and obtain your explicit consent. Laws and regulations regarding personal information protection may differ in different countries and regions, but we will protect your information in accordance with this policy and relevant Chinese laws.

IX. Protection of Minors

Our services are intended for adults. We do not actively collect personal information from minors under 14 years of age (or below the legal age of majority in your region). If you are a minor, please use our services under the guidance of your parents or guardians. If a guardian discovers that a minor has provided us with information without consent, please contact us promptly, and we will delete the relevant information as soon as possible.

X. Policy Updates

• We may revise this Privacy Policy from time to time based on changes in laws, service adjustments, and user needs;
• The revised policy will be posted on the Instuneai website with the updated effective date;
• If changes involve core rights (such as expanded information collection scope, changed purposes of use), we will notify you prominently via pop-ups, email, or other means. Continued use of the services constitutes acceptance of the revised policy;
• You may review the latest policy on the website at any time. If you do not agree with the revised content, please stop using the services and apply for account cancellation.

XI. Contact Us

If you have any questions, suggestions, or complaints about this policy, or need to exercise your rights, please contact:

Email: zjhkrun@gmail.com

We will respond and process within 15 business days.

XII. Other Provisions

• This Privacy Policy takes effect on March 27, 2026, and supersedes all prior privacy-related agreements;
• If any provision of this policy conflicts with applicable laws, the legal provisions shall prevail;
• We reserve the final right to interpret this policy.

---

Instuneai
March 27, 2026